VULNERABILITY INTELLIGENCE

CVE-2021-30153

CVSS score4.3 MEDIUM

EPSS probability0.83%

CISA KEVNot currently listed

Published2023-04-15

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Description

An issue was discovered in the VisualEditor extension in MediaWiki before 1.31.13, and 1.32.x through 1.35.x before 1.35.2. . When using VisualEditor to edit a MediaWiki user page belonging to an existing, but hidden, user, VisualEditor will disclose that the user exists. (It shouldn't because they are hidden.) This is related to ApiVisualEditor.

Weakness classification

nvd@nist.gov: CWE-668
134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-668

Primary references

cve@mitre.org
cve@mitre.org — Mailing List, Patch, Vendor Advisory
cve@mitre.org — Exploit, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108
af854a3a-2127-422b-91ae-364da2661108 — Mailing List, Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Exploit, Vendor Advisory